Following the move made by Fedora to support UEFI secure boot, Canonical has announced that they are going to support it as well.
Canonical is taking a slightly different route however. They are dropping Grub completely (as they explain, Grub’s GPLv3 license is troublesome, it may require them to publish their private key, exactly as I have written earlier). Instead they are adopting Intel’s Efilinux-loader.
Since only the bootloader needs to be signed, Ubuntu will continue to support user-compiled kernels.
See? It’s really THAT simple, if you want it to be.